Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa
File:                     b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa (raw, json)
Hash identifier:          TZvQynI4bZJHgLX5h+5HsN04NrK3HUCN9rDYr4Xuatg=
Subject key identifier:   A6:7F:89:AD:FE:D1:6E:FF:EA:A2:37:EA:4D:76:B2:F6:D0:9A:E4:5C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1B1A629F4C3868FBB0ECAD80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2e88:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:62:9f:4c:38:68:fb:b0:ec:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=db91ba34-6d98-4e58-864f-f9aa7447738f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:66:fd:98:97:e1:9a:02:69:4a:3e:92:45:
                    49:de:55:62:af:c1:39:e9:84:b8:38:46:0f:fd:be:
                    f2:a5:d0:0a:6f:74:8d:e5:23:74:24:8e:ae:31:ba:
                    c1:2a:f7:80:0d:98:91:f8:38:e1:55:12:d5:ef:af:
                    c2:d5:d8:ed:c3:80:de:37:52:ed:bc:19:d1:9e:97:
                    17:2c:f1:29:a7:8b:84:be:ae:0a:45:ff:a3:dc:ed:
                    9f:c9:46:46:3c:28:88:4a:52:a8:24:75:d3:da:e7:
                    39:4a:06:0f:35:ce:7c:4c:fe:42:d9:d8:ef:d8:36:
                    f0:7d:9a:24:a4:cc:a6:d9:7e:82:b2:c6:3f:10:85:
                    0b:e0:2a:a9:4b:64:01:05:dc:42:d4:e5:87:7e:1d:
                    56:ec:7e:f6:c3:9a:3a:96:1f:e7:a4:68:44:d3:46:
                    18:01:80:04:15:8a:cc:2f:f1:4a:94:e4:07:68:30:
                    17:1b:91:4c:b0:de:43:4a:79:2e:ac:33:f7:cf:ee:
                    02:82:f0:61:33:3e:77:55:99:3d:3c:a9:4d:06:6f:
                    10:40:c9:76:8d:08:e6:45:19:37:5d:dc:fb:d0:54:
                    f4:9e:40:0f:0b:71:21:a6:36:12:55:bc:c9:b4:08:
                    24:49:cf:89:7a:a8:d2:4c:22:b5:dd:71:1c:ba:72:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7F:89:AD:FE:D1:6E:FF:EA:A2:37:EA:4D:76:B2:F6:D0:9A:E4:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:04:8b:9e:e1:cf:d4:95:28:f0:39:82:3d:8a:58:cd:dd:a3:
         78:ad:12:44:6d:c2:77:4e:47:15:36:72:4c:16:47:02:7d:6c:
         23:e9:b4:c5:75:ef:f7:96:2f:39:ec:a6:23:d1:a9:a6:1e:e9:
         b2:f1:fc:a9:d3:0f:06:a7:e1:8c:83:e1:cb:6f:94:91:1d:5e:
         4a:bf:2c:5f:d6:70:47:b6:9e:6a:c3:59:e5:af:3a:b3:af:67:
         3e:ca:25:69:48:0b:70:e1:4d:6b:33:58:af:f5:7d:3c:c9:22:
         37:0c:ee:d1:0d:15:40:69:ce:b4:51:e4:83:c9:d4:25:53:3a:
         f9:2a:ce:92:2a:da:fc:b8:c3:8b:a7:60:5d:c2:a7:98:c9:b8:
         ac:4f:53:b6:be:f7:bd:ea:ab:e3:5f:dc:09:04:01:87:93:bd:
         74:f2:55:eb:4c:be:2c:33:0b:e9:1f:81:9d:c1:ee:dc:44:b1:
         a7:c3:60:39:e4:06:a4:69:e7:0c:f5:15:25:ed:9e:f7:8d:e2:
         a6:29:2d:25:06:da:ed:f4:bb:e6:c5:93:ba:05:c6:05:16:df:
         0f:d5:75:de:88:56:b7:70:f5:34:a5:6a:4a:75:e9:75:a6:d6:
         9e:0b:ef:2b:cf:31:f2:74:f0:99:79:1c:d5:7b:36:ca:bd:84:
         94:cc:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:32:22 2026 by rpki-client